Cloud Foundry / Cloud Foundry Summit 2021

15 mins with Kerry Schaffer from OneMagnify - Kerry Schaffer, OneMagnify

Join this VMware hosted session to learn how organizations like yours are using Cloud Foundry to ship great software. Kerry Schaffer, one of the early Cloud Foundry experts, discusses how OneMagnify is using Cloud Foundry to deliver reliable software at scale and in a timely manner.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Adventures with KubeCF - Richard Johnson & Andrew Edgar, IBM

This session will describe IBM's experiences with adopting KubeCF for re-platforming the entire IBM public CF from BOSH and VMs to Kubernetes. This will include practical experiences of how to live migrate without disruption, and lots of details on enhancements that we have been making to KubeCF along the way.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Better Together - Kevin Rutten & J. Austin Hughey, Stark & Wayne

You don’t have to toss out what works, you can take baby steps. We are going to talk about moving from Cloud Foundry to Cloud Foundry... ON Kubernetes! Yes! Keep the `cf push` workflow while leveraging the K8s ecosystem. Give your developers a choice (and time) to figure out what works best for them. In 2019, Dr Max and Dr Nic looked at CF vs Knative, in 2021 Kevin and J Austin Hughey will look at some of the other projects (like KubeCF, cf4k8s, Redhat Source2Image, and Epinio.io) and see how they compare.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Beyond DevOps Metrics – Technical, Business, and Culture Metrics for the Software Defined Business - Michael Coté, VMware

In this talk, you’ll hear about three types of metrics that organizations are using to get better at building and running software. You know, those organizations that are doing the “digital transformation” thing so that they can run their business with software that isn’t ancient.

Be like a tech company! We all know development and operations metrics like lead time, error budgets, and mean time to repair. But we don’t focus on business metrics enough. And least of all, we don’t talk about internal, organization, or “culture” metrics enough. This talk gives an overview of 15 metrics across three types: technical metrics, business metrics, and culture metrics. If we look at the end-to-end process of software creation, usage, and work as a system to be programmed and refined, we need metrics across that entire system.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Building Rapid CVE Responses into CF for K8s - Dr. Dave Walter & Andrew Wittrock, VMware

CVEs are unavoidable. Over 18,000 were reported last year alone. Cloud Foundry platform operators want to be able to quickly and easily patch their platforms whenever a CVE that might adversely affect them is reported. This is especially difficult when running on top of Kubernetes as components are distributed as runnable images instead of BOSH releases and stemcells. This talk will describe the mechanisms we use to detect and address CVEs in the component images that are included in CF for K8s. Learn how we: * Use Trivy to detect new CVEs in images included in the latest CF for K8s release * Use image metadata to track the exact version of source code used to build a given image * Use a combination of kbld, pack, cloud-native buildpacks, and Dockerfiles to (re)build images * Use CI to automate cutting patch releases of CF for K8s when a high or critical CVE is detected

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

CRDs FTW: Eirini’s Journey from REST to CRDs - Giuseppe Capizzi, VMware

As the architecture of Cloud Foundry on Kubernetes evolves, more and more components are shifting towards Kubernetes-native designs, with the objective of making CF more and more a first-class citizen in the Kubernetes ecosystem. A big part of this effort is centred around adopting the Kubernetes programming model, based on Custom Resource Definitions and controllers. Eirini has been one of the first components to do so. In this talk Giuseppe will give an overview of the Kubernetes programming model, describe how Kubernetes controllers work, and discuss the challenges the Eirini team faced while building a CRD-based API to replace their existing REST API.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Cloud From The Ground Up: A New Approach to Technology Education - Katie Gatto, Monmouth University

Cloud technologies are increasingly integrated in to tools and systems, but not taught heavily to developers at the university level. The quick "missing class" session will talk about how developers can augment this gap.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Collecting App Container Metrics with Sidecar Buildpacks - Patrick Hartz, anynines GmbH

Observability of applications in production is important. It’s easy to stream logs to a syslog endpoint. Depending on the programming language obtaining app-related metrics can vary in difficulty. Beside this, it is complicated to determine your app container’s load. Since version 3 of the CF API, Cloud Foundry supports sidecars. In this talk, You will see how to add a small golang binary wrapped in a sidecar buildpack which streams the container metrics. Using this sidecar approach avoids the necessity for reimplementing the collection of the same metrics across all applications. Instead, the effort is reduced to a minimum when pushing the application to Cloud Foundry.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Decrypting Multi-Tenant Security Through Real-World Challenges - Eric Vermeer, IBM

Learn how to take back control of your TLS / SSL cipher security for your multi-tenant Cloud Foundry instances. This session will take a look at how to pick the right ciphers for your application, the challenges with enforcing your ciphers with built-in methods in either your application or the Cloud Foundry control plane, and an easy-to-add option that lets you regain control of which ciphers are supported by your application even when running in a multi-tenant environment. The session will wrap up with a behind the curtain look at securing large multi-tenant Cloud Foundry environments, including challenges and potential solutions.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Deep Dive: Full Speed Ahead: Tales of Running Loggregator at its Scaling Limits with High Log throughput and Minimal Log Loss - Jovan Kostovski, SAP

The Loggregator is one of the Cloud Foundry's most important building blocks. It is responsible for streaming logs, metrics and events from the running applications and platform components to their consumers which usually are some kind of monitoring and logging systems. It is Cloud Foundry operator's eyes and ears to what is happening in the system. As the log load rises, it can happen that some of the Loggregator's components start dropping logs. The goal of this talk is to give a short overview of Loggregator and show the Cloud Foundry operators what should they monitor, how should they scale Loggregator and what operational and organizational (business) actions should they possibly take in order to keep Loggregator running at the required throughput rate. Jovan will share the lessons learned from running Loggregator in production at throughput of 260k logs/s.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Deep Dive: Making a Molehill Out of a Mountain - Neville George & Ian Bush, Comcast

Spring, Cloud Foundry, Microservices & Kubernetes
Built wonderfully for developers’ speed and ease;
Just using the tech does not give your apps immunity
Hear what we did by surrounding it with a community.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Deep Dive: Moving is Hard – Migrations without Impact (or back pain) - Stacy Kirkland, Liberty Mutual Insurance & Tom Mitchell, Stark & Wayne

The thought of moving from one place to another is daunting. Whether you’re moving to a new city or next door, how and when do you make a snap decision? While working remotely across multiple time zones, Liberty Mutual migrated thousands of applications between Cloud Foundries across twelve foundations and five regions in the public cloud and on-premise. In this session, we will discuss how we approached the effort to migrate a Cloud Foundry platform. We'll share with you the successes and some of the challenges we overcame at a technical, organizational, and personal level and how important it was to have a partner like Stark & Wayne there to support us. Please join us if you’d like to learn how we migrated Cloud Foundry with zero developer effort and minimal impact to the business.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Deep Dive: Paketo Buildpacks Bill of Materials: We’re Built Different - Sophie Wigmore & Forest Eckhardt, VMware

The exploitation of vulnerabilities, like those in the recent high-profile SolarWinds attack, highlight the need for thorough security and compliance auditing. In the Cloud Native technology landscape, there are a variety of purpose-built solutions that help eliminate pain points along the software supply chain. One of these solutions, bill-of-materials (BOM), is an industry standard mechanism for surfacing metadata to be used for security auditing. Cloud Native Buildpacks (CNB) have native support for the BOM baked into the image metadata. The Paketo project, an OSS implementation of CNB, is taking the BOM a step further by populating it with dependency and package metadata from both the build process and the final image. This talk will explore how our approach to BOM provides more convenient and comprehensive insights into vulnerabilities, and how they can be mitigated.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

HTTP/2 Awesome - Carson Long, VMware

HTTP/2 brings performance benefits and new features to the modern web. My team has been working to seamlessly bring this feature set to app developers. This talk will cover: a quick intro to HTTP/2, an overview of this new Cloud Foundry feature, discussion of some interesting technical problems, a live demo, and performance testing data.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

How to Design, Build Smart Platforms Leveraging Machine Learning, NLP - Dilleswara Rao Anupoju, Comcast

Platforms such as Cloudfoundry and/or Kubernetes enabled the proliferation of micro-services both in terms of development and deployment of apps/services at epic proportions. This brings several key challenges - one of them being; how to monitor all these services at scale at different layers ( to complicate it further; across multiple clouds) and collate the metrics, logs from disparate source systems then correlate them back to analyze further. Monitoring critical apps/services and alerting on issues is the key to success of any business enterprise. In this talk Dill Anupoju would like to present how to leverage some of the available open source tool stack coupled with some of the Machine Learning/NLP techniques to monitor these services at scale in the context of distributed computing environments.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

How to Migrate Data Between Services using Cloud Foundry Tasks - Heitor Meira de Melo, anynines GmbH

Every developer at some point in life has faced the issue of migrating data between services, either to fork a data service instance or to migrate the data because a new major version of the data service has been released and there is no path to upgrade. In this talk, Heitor will show how to take advantage of the Cloud Foundry tasks to migrate data between services without the overhead of downloading the data into a local machine and avoid expensive external network traffic or even a ticket for your platform operator.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Keynote: The Social Responsibility of Software Engineers - Coraline Ada Ehmke, Founder and Executive Director, Organization for Ethical Source (Sponsored by ResilientScale)

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Keynote: Welcome & Opening Remarks - Chip Childers, Executive Director, Cloud Foundry Foundation

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Microservices Observability on Kubernetes - Rajesh Gheware, UniGPS Solutions

This talk aims at providing a deeper view into various pillars of Observability and how to implement those within the Kubernetes Cluster through an example. Event Logs, Distributed Tracing, and Metrics (applications as well cluster level) are the three pillars that will be explored as part of this session.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Options Galore to Get from Source Code to Container - Matthias Haeussler, Novatec

A typical workflow in a modern software dev project can look like: Build code, put built artifact into container image, put container image into registry, deploy. Each step has it’s own requirements and pitfalls alike. Dockerfiles seems to be the choice with the highest adoption when it comes to containerizing code artifacts. However there are options, which might remove some of the pitfalls and standardize the entire process even more. The talk will give deeper insights by comparing (multi-stage) Dockerfiles to Cloud-Native Buildpacks (buildpacks.io/paketo.io) and Google’s JIB under the evaluation criteria of build time, build size, standardization, robustness and security. The intended take-away of the session is a better overview of container building and deployment options along with understanding of requirements, advantages and drawbacks.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Remote Debugging Java applications in Cloud Foundry - Subhankar Chattopadhyay & Shashank Mohan Jain, SAP

Debugging code is a skill every developer should have or attain. Debugging a cloud based application before releasing to production has become extremely crucial. Can we leverage things like non breaking break points to debug code in cloud. Is it possible to allow a remote debugger to capture insights like variable states, stack states without having to disrupt the flow of the system. We propose to talk about this in context of Java applications and how remote debugging of java applications with non-breaking break points can be achieved. We discuss the Java Debugger Platform Architecture (JDPA) and its components like JVMTI, JDWP and JDI. Non-breaking breakpoints are a valuable component of remote debugging, as they provide all the necessary insights without disruptions to the running application. This proves useful especially when the target system is running in production.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

TLS for Everything - Miki Mokrysz, EngineerBetter/SAP & Patrick Lowin, SAP

Encrypting network traffic has become a basic industry expectation. Cloud Foundry does this for most things, but there are still some connections unencrypted. In this talk we’ll go over work we’ve been doing at SAP to further encrypt Cloud Foundry network traffic. We will also talk about open topics in the “TLS Everywhere” track and other requirements and experiences in Routing and Networking.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Technical Community Leadership Panel - Amelia Downs & Eric Malm, VMware; Lee Porte, GOV.UK PaaS Team; Stephan Merker, SAP SE; Alex Williams, The New Stack

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

The Challenges of Onboarding People With Zero Cloud Foundry Experience: A Newcomer’s POV - Martín Valencia Flores, anynines GmbH

Every developer starts off as a rookie. Even when taking into account those rare, talented individuals that almost seem to absorb knowledge through their fingertips, there is always a shared status: newcomer. From the perspective of onboarding, multiple factors come into play. While person being onboarded is arguably the most important one, we also have to look at our approach: Is the process too technical? Do we require an historical background to the topic at hand? Is the topic overly complicated? Can we mitigate this? Martín will share some of the challenges in onboarding people with no experience in Cloud Foundry from a newcomer's perspective. He will also cover the virtues of Cloud Foundry itself, its fast curve for beginners, and the ease of the continuous learning process for mid to high levels; which allow developers to transition almost seamlessly into the cloud ecosystem.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

The Odd Couple - Cross-platform Services with Examples in Blacksmith and Tweed - Kevin Rutten, Stark & Wayne

(Theme music from the Odd Couple starts playing) “One was an Open Service Broker for Cloud Foundry, one was a Kubernetes friendly service wrapping Dockerhub images. Both as different as could be but trying to live together” Kevin want to show you two different projects to manage services. Blacksmith boots VM running services via BOSH and Tweed starts services via containers. Cloud Foundry can use both. Kubernetes can use both. The developers can use both. Mix and match the best parts of Cloud Foundry and Containers. This talk includes project updates on two projects to provide services (and service frameworks) for Cloud-Native architectures while showing how to use and migrate the services as needed. Examples shown should be portable to other service brokers helping operators and developers as they enter a hybrid-plsatform world.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Transitioning to a Community-owned Stemcell - Felix Riegger & Florian Nachtigall, SAP

While the stemcell source code is open source and was always open to contributions, the actual release process was run on vendor-owned infrastructure and it was not easy to actually contribute. This has changed. When it became clear that there might be no Bionic Stemcell for the community in time SAP volunteered to bring the already existing beta version to a GA release and to stewardship the transition of the necessary build infrastructure to CloudFoundry Foundation owned hyperscaler accounts. Now, every community member can easily participate in the stemcell creation process. ​ In this talk we will give an update of what has changed, how the new community-owned pipeline setup looks like and how you can get started / involved. We will touch upon architecture decisions made, access and credential management and the future of stemcell publishing.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Tweaking Cloud Foundry for Scale - A Tale About Chatty Gorouters - Stefan Lay, SAP

Cloud Foundry components are designed for observability. There are more metrics available than even a seasoned Cloud Foundry may know. When the system is under load these metrics are very useful. In this talk we want to look into the metrics the gorouter provides and how they are propagated through the loggregator stack. A main part will however be a case where we disabled metrics sent by the gorouter for each request [1]. By this we managed to reduce the load of the gorouters and the loggregator VMs significantly. This not only saves costs, but also allows us to further scale out our Cloud Foundry foundations. [1] https://github.com/cloudfoundry/gorouter/pull/275

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

Updating Roles in Cloud Foundry: Premiering Space Supporter Role - Mona Mohebbi & Merric de Launey, VMware

It’s valuable to give many people the ability to troubleshoot applications, but it can be dangerous to give too many people access to application secrets. This is where the new “Space Application Supporter” role comes in. This new role will empower more people to troubleshoot, while maintaining strict security requirements. This talk will cover: the state of the current roles, an overview of what a space application support can and can’t do, and the technical challenges with implementing this role.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/

When to Choose Cloud Foundry Over Kubernetes? - Julian Fischer, anynines

Kubernetes became ubiquitous which comes with the risk well phrased in the proverb: if you got a hammer, everything you see is a nail. In this talk you'll examine where Cloud Foundry has a strong benefit over Kubernetes: The right tool for the right job. You will learn how factors such as the structure of an organization and the nature of the workload are key to make an informed decision. This will also include a brief comparison of the applicability of both the classic CF-for-VMs and CF-for-K8s stack. At the end of the talk you will know where CloudFoundry provides clear advantages over Kubernetes and which CF stack is right for you.

To learn more about Cloud Foundry, The Proven Developer Experience For Kubernetes click here: https://www.cloudfoundry.org/